How do I update my secure boot certificate

Question

How do I get the updated secure boot certificate installed on my computer?

Answer 1

Well, you should receive the secure boot update automatically.

I highly recommend to install latest BIOS firmware update for your system model.

If issue still persists, you can refer this video fix:

https://www.youtube.com/watch?v=QtyT4ccWhIM

Note: Included link(s) in this reply refers to a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Answer 2

Hi,

To check if you have updated your keys, just follow the procedure below:

Open a PowerShell console and make sure PowerShell is running as an administrator before running the following commands:

Imposta la chiave di registro su Set-ItemProperty -Path “HKLM:\SYSTEM\CurrentControlSet\Control\SecureBoot” -Name “AvailableUpdates” -Value 0x40

Run the following scheduled task as Start-ScheduledTask -TaskName "\Microsoft\Windows\PI\Secure-Boot-Update"

Restart your computer twice after running these commands to verify that your computer starts with the updated database.

To verify that the Secure Boot database upgrade was successful, open a PowerShell console and make sure PowerShell is running as an administrator before running the following command: [System.Text.Encoding]::ASCII. GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023'

Check if the result is true;

If it says true, just wait for the update. If it takes longer than I mentioned and hasn't updated, perhaps the keys are in a BIOS file for update, so you would have to check if the motherboard manufacturer released a BIOS update with the updated keys.

If it doesn't update after a while, you would have to update the BIOS to update the keys. If you want, we can try the update?

Thanks